CVE-2011-4506

2022-10-0316:15:15

mitre

www.cve.org

upnp

igd

thomson tg585

firmware 7.x

arbitrary port mappings

soap request

wan interface

external forwarding vulnerability

AI Score

6.9

Confidence

High

EPSS

0.004

Percentile

74.5%

JSON

The UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an “external forwarding” vulnerability.

References

toor.do/DEFCON-19-Garcia-UPnP-Mapping-WP.pdf

www.kb.cert.org/vuls/id/357851